Senior Cloud Security Architect — Enterprise (Hybrid)

Archer; San Jose (CA); Hybrid; USD 155,000 - 185,000; Full time

Job summary

Archer is seeking an Enterprise Cloud Security Engineer to secure cloud-native environments (AWS/Azure) in a hybrid San Jose setting. You will design secure architectures, automate security in CI/CD, and enforce zero-trust access across Kubernetes and container platforms while aligning with aviation standards.

You will lead IaC security reviews, integrate CSPM/CNAPP tools, and drive incident response for cloud threats, protecting telemetry and flight-critical data throughout the cloud stack.

Qualifications

• 5+ years of experience in Cloud Security, DevSecOps, or Infrastructure Engineering.
• 3+ years focused on public cloud (AWS, Azure, and GCP).
• Deep hands-on expertise with Terraform, Kubernetes, and Linux environments.
• Proficiency in Python, Go, or Bash for automating security tasks.
• Experience implementing CSPM/CNAPP tools and SIEM platforms.
• Knowledge of NIST CSF, NIST 800-53, or FedRAMP requirements.

Responsibilities

• Design, implement, and maintain secure cloud architectures across AWS and Azure.
• Lead security review and automated scanning of IaC templates (Terraform, CloudFormation, Helm).
• Integrate security tooling into CI/CD pipelines (Jenkins, GitLab, GitHub Actions).
• Secure containerized workloads and orchestration platforms (EKS, AKS) with runtime protection and image scanning.
• Map cloud security controls to NIST/ISO and aviation standards; automate audits.
• Build high-fidelity detection rules for cloud threats and lead incident investigations.
• Protect telemetry and sensitive data pipelines through encryption and key management.

Job description

Archer is seeking an Enterprise Cloud Security Engineer to secure cloud-native environments (AWS/Azure) in a hybrid San Jose setting. You will design secure architectures, automate security in CI/CD, and enforce zero-trust access across Kubernetes and container platforms while aligning with aviation standards.

You will lead IaC security reviews, integrate CSPM/CNAPP tools, and drive incident response for cloud threats, protecting telemetry and flight-critical data throughout the cloud stack.